It assigns an overall compliance score from a variety of factors, according to the patent description. Some are user-inputted or executed data points, including user age, account balance, transaction volume, location, verification history and the number of devices with access.